This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft
File: A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft (raw, json)
Hash identifier: RlZz4RbgauaLgbz80dJm1Ta0L6Gx7O/oiUM97zJqBn0=
Subject key identifier: 2C:A1:30:B6:FD:1A:15:13:76:5D:AA:C0:B8:56:65:B7:45:EE:4F:2A
Authority key identifier: A7:D1:BD:82:11:3C:D7:20:C5:72:AF:99:A8:FB:29:40:61:0A:EC:49
Certificate issuer: /CN=A7D1BD82113CD720C572AF99A8FB2940610AEC49
Certificate serial: 3EA7BE9668A6E86425B7578E244C9D113DCA5BBE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft
Manifest number: 01AE
Signing time: Wed 03 Dec 2025 03:31:20 +0000
Manifest this update: Wed 03 Dec 2025 03:26:20 +0000
Manifest next update: Sat 06 Dec 2025 08:44:20 +0000
Files and hashes: 1: 3130332e37372e3230372e302f32342d3234203d3e203634323937.roa (hash: Ldzq0WjI5kxA0xwZ9j/+HkbFA7bRhcVP8vfijlAcxEw=)
2: 3130332e37372e3230342e302f32322d3232203d3e203634323937.roa (hash: DfpI3sfZfOso5gGyoS07WtJ/Jycy9ggknC4EuCpUXOM=)
3: A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl (hash: 97gt4hLOgOzsda82r8Tf9IcDU68ajGSoPNgAfpTyu7A=)
4: 3130332e37372e3230352e302f32342d3234203d3e203634323937.roa (hash: NZ3zgpSngsIOBUBuxKD8qjF4IFrIt5WPsm16vJBokXQ=)
5: 3130332e37372e3230342e302f32342d3234203d3e203634323937.roa (hash: BXSq9b95eC9MSwvxuZ/AcJL572zXX4pRx3/J1qctsOw=)
6: 323430373a396538303a3a2f33322d3332203d3e203634323937.roa (hash: 8XW9fR3nJvKy312lXn4PWtXoN/9mgbLUR7iv4Mby3uc=)
7: 3130332e37372e3230342e302f32332d3233203d3e203634323937.roa (hash: cOnqdPMFYbqbFi/FA6Q7dA8kJTzM3+iE0W1mSgXK4nI=)
8: 3130332e37372e3230362e302f32342d3234203d3e203634323937.roa (hash: qm6Wx8HHdMprTN2Xs+s/pxVtuwdrhpPAL17E7ApccPM=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl
rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 08:44:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:a7:be:96:68:a6:e8:64:25:b7:57:8e:24:4c:9d:11:3d:ca:5b:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A7D1BD82113CD720C572AF99A8FB2940610AEC49
Validity
Not Before: Dec 3 03:26:20 2025 GMT
Not After : Dec 6 08:44:20 2025 GMT
Subject: CN=2CA130B6FD1A1513765DAAC0B85665B745EE4F2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c8:31:f9:50:38:63:f4:d2:50:fd:f6:6b:d2:
70:57:a3:03:e3:d8:3e:f7:a7:a7:4d:1f:e8:f6:6a:
c6:d7:9d:68:2e:7b:0a:76:f3:93:7e:35:a9:d6:45:
3c:69:f8:44:51:ef:8d:2c:e9:8b:98:a3:35:3f:f6:
db:22:27:bd:61:52:c8:d2:6d:35:45:6c:0e:43:c6:
b1:e8:30:29:e3:62:7a:f4:f7:e3:1b:2c:b7:03:9f:
76:ff:1d:b4:63:e8:31:2a:90:14:98:ca:10:4f:39:
19:24:c0:12:6c:4b:9a:97:bc:b0:7e:14:ba:c4:35:
ef:b3:30:9e:71:4f:6b:df:02:d7:78:05:87:c2:34:
b8:b0:70:3d:41:b9:8e:ce:53:ad:94:7e:b5:35:c8:
8c:51:be:05:a5:60:52:60:54:f8:21:15:5b:0f:ab:
62:3a:90:3b:b1:65:f6:80:af:84:87:18:1d:98:8e:
e6:1a:e8:0a:64:ec:bd:53:3e:f6:1d:27:47:10:9c:
56:41:ae:65:d9:8e:e8:c9:2d:ec:16:4c:20:3d:60:
79:a7:de:a2:3c:5d:b8:19:dd:46:5e:f4:4f:8e:d5:
ad:a8:3d:df:ae:e5:59:c0:9c:be:72:68:9b:c4:f9:
1b:01:cd:d5:e4:44:0b:68:19:57:f3:e0:b3:f9:de:
58:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A1:30:B6:FD:1A:15:13:76:5D:AA:C0:B8:56:65:B7:45:EE:4F:2A
X509v3 Authority Key Identifier:
keyid:A7:D1:BD:82:11:3C:D7:20:C5:72:AF:99:A8:FB:29:40:61:0A:EC:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:13:41:76:e3:fe:16:a7:48:4d:84:0a:a9:ef:ad:05:d7:59:
f9:95:b9:03:7e:00:02:53:3d:8a:b9:f9:c2:3f:30:ee:27:4b:
ea:87:49:c1:89:5f:aa:3c:af:82:f8:44:36:dd:a2:d5:08:51:
ff:e4:69:10:e0:07:88:68:91:df:36:76:4d:b5:52:b4:5c:33:
c4:64:5b:6a:dc:3b:ea:b4:55:5d:3e:ae:70:0f:e7:b9:4c:60:
fa:54:39:2d:47:de:2a:d4:ad:da:90:47:f9:54:7e:24:f5:90:
21:9a:7a:05:77:5c:69:21:b2:69:89:4a:6f:81:08:d7:5f:2c:
5d:7e:27:0c:03:e4:0b:e3:57:b7:9d:97:7c:63:4c:2a:cf:b2:
1f:76:2d:5f:2c:2a:79:c0:1e:79:ee:78:70:ed:d0:3e:20:ba:
19:6d:b7:8e:14:b6:de:20:3c:e4:8e:ff:98:dd:b3:7d:33:51:
61:d8:81:df:f1:00:30:4d:33:73:eb:36:24:a3:ea:7f:35:55:
d1:22:51:44:af:7a:a7:c9:52:87:1e:75:8d:9d:e4:d1:2f:a9:
a6:9d:28:d1:5e:49:74:2b:0a:8d:d8:16:ee:33:89:f6:21:2a:
85:a4:64:d5:26:78:6e:af:b9:5b:b3:f3:f2:fc:3d:71:5e:f8:
b6:e5:28:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:44:10 2025 by rpki-client